Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
File: YwITq6Hqkoue0ySR3puhBGSwY2w.mft (raw, json)
Hash identifier: 50dI2LRJDNaYMkNDAiN5nngruvb8LAJClAtDeklQDlA=
Subject key identifier: 4D:1D:9D:48:86:52:48:35:71:AA:B9:86:EE:D3:6A:72:DB:19:C3:B0
Authority key identifier: 63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
Certificate issuer: /CN=630213aba1ea928b9ed32491de9ba10464b0636c
Certificate serial: 01976BBD3D25EFF4F5D3E50155A3AC405F42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 00:00:53 +0000
Manifest this update: Sat 14 Jun 2025 00:00:53 +0000
Manifest next update: Sun 15 Jun 2025 00:00:53 +0000
Files and hashes: 1: 6ZqvxOIku_49tBv2G-O9_p-5hVM.roa (hash: TYPoYRQa9KHLM0V6FPsrIT1zwnhyRnA4uELbenS3VGM=)
2: YwITq6Hqkoue0ySR3puhBGSwY2w.crl (hash: 9oq2zxFgxMhrmHz2i9WGvjAj4knn/ksQj8h1FjDSHV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:3d:25:ef:f4:f5:d3:e5:01:55:a3:ac:40:5f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=630213aba1ea928b9ed32491de9ba10464b0636c
Validity
Not Before: Jun 14 00:00:53 2025 GMT
Not After : Jun 15 00:00:53 2025 GMT
Subject: CN=4d1d9d488652483571aab986eed36a72db19c3b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2e:42:15:5f:5c:60:e5:d3:31:88:51:9a:ec:
89:3e:87:d3:3d:c9:7c:0f:a1:3f:38:05:b1:3e:05:
a8:ae:c3:87:5b:cd:7c:66:26:69:b3:a7:5a:3c:60:
9a:c3:76:5e:8f:1f:88:c1:1d:da:2a:fd:48:bd:e4:
4c:79:42:fd:bb:ed:5c:0e:df:25:30:d6:06:a0:9c:
4b:f7:56:f5:23:ca:f1:6b:e4:0f:c0:7b:be:ff:b4:
c2:aa:34:99:4e:63:48:99:b0:e0:43:a0:a7:19:79:
ea:ee:eb:3b:03:53:05:ab:75:d8:99:18:49:6e:d3:
96:6a:69:77:9b:d7:9f:c8:0c:4c:59:7e:f4:1b:ec:
f6:90:8b:3e:42:97:0f:3e:a9:54:56:ad:48:79:29:
28:eb:7b:b2:78:22:b2:23:1d:9e:b0:f0:eb:e6:b1:
d9:42:68:76:59:1e:9a:00:58:88:4a:cc:0d:d4:b7:
44:0a:00:be:c9:64:5c:2e:2d:48:fb:c7:40:25:3a:
de:08:fb:31:dd:3e:0e:c2:45:b1:db:8a:17:84:2f:
8d:a4:ea:5e:04:57:a2:b8:23:9b:ff:b6:19:13:f5:
ba:87:63:c5:7d:74:c0:2b:39:ba:af:d7:f1:6f:18:
90:70:87:ea:3b:fb:8e:6a:cc:2f:2e:86:65:65:f0:
0c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:1D:9D:48:86:52:48:35:71:AA:B9:86:EE:D3:6A:72:DB:19:C3:B0
X509v3 Authority Key Identifier:
keyid:63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e4:e8:56:1b:49:71:25:a8:db:a0:6a:e7:f6:d8:b8:73:ac:
4f:60:18:ca:3b:c9:66:7a:3a:ae:6d:5c:03:00:4c:a3:e6:ef:
03:a8:98:2a:af:75:7b:41:a6:63:ec:e7:c5:8b:1a:fb:33:43:
04:68:7f:f8:61:c3:20:c5:44:f7:f4:a8:76:66:0a:b7:74:e1:
62:eb:2c:ea:63:b5:fe:b3:b0:fa:2f:30:42:5e:9c:c2:af:52:
22:4f:22:01:85:2a:6d:f7:cb:5b:a3:b8:d8:5c:d7:a2:39:1d:
cb:81:6c:a5:aa:43:37:c2:87:75:84:9c:41:99:34:2f:d1:75:
9f:bd:d7:7c:28:9f:30:1d:27:66:4a:36:a0:6a:f1:79:df:29:
cf:71:d9:79:c3:df:05:41:b1:15:fe:e5:8f:ee:f6:1f:4b:ed:
13:57:f4:a8:49:69:82:1e:44:7f:41:cb:8e:7c:7e:32:f7:65:
bc:a7:d3:50:a2:68:98:2a:92:a5:bf:02:5d:65:1a:b1:a1:34:
a2:53:8d:1f:dd:8e:e5:1c:77:19:2e:3d:f7:86:58:45:33:6d:
4d:1a:58:ca:96:d5:83:21:ab:91:5a:24:b1:db:26:a0:b5:77:
fa:82:a1:3f:00:72:d9:71:d1:5f:86:de:9d:b0:96:df:7f:6b:
3e:b5:8b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:54:37 2025 by rpki-client